Mozilla warns of new Firefox vulnerability

Javascript flaw could allow for remote attacks.

Mozilla is warning users and administrators following the discovery of a new flaw in its Firefox 3.5 browser.

The company said that the flaw exists in the browser's JavaScript tool within a component called 'just in time' (JIT.)

If exploited, the flaw could allow an attacker to remotely execute code on a targeted system.

Mozilla further warned that a working exploit has been publically released, increasing the risk of attacks occurring in the wild.

To prevent attack, the company has posted instructions for temporarily disabling the JIT component through the browser's about:config menu. Doing so will slow JavaScript performance, however.

Users can also reduce the risk of attack by running the browser in Windows' Safe Mode.

The Firefox flaw is the latest in what has been a string of high-profile browser exploits in recent days.

Last week Microsoft warned of a flaw in a video ActiveX plug-in that was actively being targeted in Internet Explorer, and yesterday the company gave word of a second vulnerable IE component, this time an Office plug-in, that was being targeted by attackers.